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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) has 
been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 
CFR 1.114. Applicant's submission filed on 09/1 1/2006 has been entered. 

Claim Objections 

2. Claims 8 -15, 23 - 28, 30, 40, 44 and 46 - 49 are objected to because of the following 
informalities: 

Claim 8 recites "abase" where it should read -the base--; 

Claims 1 1 , 23 and 44 include erroneous status identifiers. 

Claim 30 recites "setting aid timer"; where it should read -setting a timer- 
All other claims not specifically identified are objected on the basis of dependency. 
Appropriate correction is required. 

Claim Rejections -35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

3. Claims 2, 18 - 20, 23 - 28, 30 - 31 are rejected under 35 U.S.C. 112, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. 

4. Claims 2, 18, 23, 28 and 30 - 31 recite the limitation "said step". There is insufficient 
antecedent basis for this limitation in the claims. All other claims not specifically identified are 
rejected on the basis of dependency. 
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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

5. Claims 1 - 49 are rejected under 35 U.S.C. 102(b) as being anticipated by Varadharajan 
et al. in US Patent No 5887063 (hereinafter US '063). 

As for claim 1 , US '063 discloses: 
A method for providing access to secure data through a portable computing system during a 
specified time, wherein said method comprises: 

establishing a connection between said portable computing system and a base 
computing system to provide for transfer of data between said portable computing system and 
said base computing system; 

verifying identity of said base computing system within said portable computing system; 

resetting a timer within said portable computing system to run for a specified time; and 

providing access to said secure data only when said timer is running, (see Figure 1, 
items 10 and 12; column 2, lines 31 - 46 and 59 - 65; Abstract) 

For claim 2, US '063 discloses: 
The method of claim 1, wherein said step or verifying identity of said base computing system 
comprises: 

receiving and storing a public cryptographic key from said base computing system 
during an initialization process, 

following said initialization process, generating a random number within said portable 
computing system; 
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transmitting said random number to said base computing system; 

receiving a number transmitted from said base computing system; 

decrypting said number transmitted from said base computing system to form a 
decrypted number; and 

determining that said decrypted number matches said random number, (see column 4, 
lines 22 - 42) 

For claim 3, US '063 discloses: 
The method of claim 1, additionally comprising a step of verifying whether a password is 
entered correctly in said portable computing system, (see column 4, lines 43 - 52) 

For claim 4 and 47, US '063 teaches: 
The method of claim 3, wherein said step of verifying whether a password is entered correctly 
includes: 

transmitting an initial password to said base computing system during an 
initialization process, 

storing said initial password within said base computing system; 

following said initialization process, transmitting a present password to said base 
computing system; 

determining in said base computing system that said initial password matches said 
present password; 

transmitting an approval code from said base computing system to said portable 

computing system; and 

determining that said approval code has been received, (see column 4, lines 13-21) 
For claim 5 and 48, US '063 teaches wherein said connection is established through a 

switched telephone network, (see column 4, lines 26 - 28) 
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For claim 6 and 49, US '063 teaches wherein said timer includes a timer register storing 
a number corresponding to a time remaining, 

said number corresponding to a time remaining is decremented in response to a series 
of timing pulses generated within said portable computing system, and 

setting said timer includes storing a number corresponding to said specified time in said 
timer register, (see column 3, lines 7-9; column 4, lines 8-12) 

For claim 7, US '063 dislcoses: 
A method providing for access to secure data through a portable computing system, wherein 
said access to said secure data is limited to a specified time, and wherein said method 
comprises: 

initializing a base computing system and said portable computing system to work together 
as a system by an initialization process comprising; 

storing data identifying said base computing system within said portable computing 
system; and 

resetting said portable computing system by a reset process following said 
initialization process including: 

establishing a connection to transmit data between said portable computing system and a 
base computing system; 

determining, using said data identifying said base computing system, that said 
connection has been made between said portable computing system and said base computing 
system; 

setting a timer within said portable computing system to run until said specified time has 
expired; 



Application/Control Number: 09/993,135 Page 6 

Art Unit: 2132 

determining if said timer is running; and providing access to said secure data only when 
said timer is running, (see column 2, lines 31 -46 and 59 - 65; Figure 1; Abstract) 

For claim 8, US '063 teaches: 
The method of claim 7, wherein said initialization process additionally includes determining 
whether said data identifying abase computing system has been previously stored in said 
portable computing system; 

if said data identifying a base computing system is determined to have 
been previously stored, said data identifying a base computing system remains 
without being overwritten during said initialization process, (see column 2, lines 35 - 37; 
column 3, lines 7-9; column 4, lines 13-21) 

For claim 9, US '063 teaches: 
The method of claim 8, wherein said data identifying said base computing is a public 
cryptographic key of said base computing system, and wherein said process of determining that 
said connection has been made between said portable computing system and said base 
computing system includes: 

generating and storing random number within said portable computing system; 
transmitting said random number from said portable computing system to said base 
computing system; 

encrypting said random number within said base computing system with a private 
cryptographic key of said base computing system to form an encrypted number; 

transmitting said encrypted number from said base computing system to said portable 
computing system; 

decrypting said encrypted number within said portable computing system with said 
public cryptographic key of said base computing system to form a decrypted number; and 
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comparing said decrypted number with said random number stored within said portable 
computing system, (see column 4, lines 34 - 42) 

For claim 1 0, US '063 teaches: 
The method of claim 8, wherein said timer includes a timer register storing a number 
corresponding to a time remaining, 

said number corresponding to a time remaining is decremented in response to a series 
of timing pulses generated within said portable computing system, and 

setting said timer includes storing a number corresponding to said specified time in said 
timer register, (see column 2, lines 43 - 46; column 3, lines 7-9) 

For claim 1 1 , US '063 teaches: 
The method of claim 8, wherein said method additionally comprises receiving an input 
corresponding to a time, and setting said specified time according to said input, (see column 4, 
lines 9 -12) 

For claim 12, US '063 teaches: 
The method of claim 8, additionally comprising storing a cryptographic public cryptographic key 
of said portable computing system within said base computer system, (see column 4, lines 64 - 
67; column 5, lines 1-8) 

For claim 13, US '063 teaches: 
The method of claim 8, wherein said initialization process additionally includes receiving a 
present password as an input, determining if a password has been previously stored, and 
storing said present password in response to a determination that said password has not been 
previously stored, 

said reset process additionally includes receiving a present password as an input and 
determining if said present password matches a stored password; 
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and 

said timer is set within said portable computing system only in response to 
a determination that said present password matches said stored password, (see column 4, lines 
13-21) 

For claim 14, US l 063 teaches: 
The method of claim 13, wherein said present password is received as an input within said 
portable computing system, 

said present password is transmitted from said portable computing system 
to said base computing system, 

said present password is stored within said base computing system following a 
determination that a password is not previously stored within said base computing system; 

a determination is made in said base computing system of whether said present 
password matches a stored password, 

said reset process additionally includes transmitting an approval code from said base 
computing system to said portable computing system in response to a determination that said 
present password matches said stored password, 

and 

said timer is set within said portable computing system in response to receiving said 
approval code, (see column 4, lines 13-21) 

For claim 15, US '063 teaches: 
The method of claim 14, wherein said data identifying said base computing is a public 
cryptographic key of said base computing system, and wherein said process of determining 
that said connection has been made between said portable computing system and said base 
computing system includes: 
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generating and storing random number within said portable computing system; 

concatenating said random number and said present password within said 
portable computing system to form a concatenated number; 

encrypting said concatenated number within said portable computing system with said 
public cryptographic key of said base computing system to form a first encrypted number; 

transmitting said first encrypted number from said portable computing system to said 
base computing system decrypting said first encrypted number within said base computing 
system with a private cryptographic key of said base computing system to form a 
decrypted number; 

dividing said decrypted number to form a decrypted random number and said present 
password; 

encrypting said decrypted random number within said base computing system with a 
private cryptographic key of said base computing system to form a second encrypted number; 

transmitting said second encrypted number from said base computing system to said 
portable computing system; 

decrypting said second encrypted number within said portable computing system with 
said public cryptographic key of said base computing system to form a decrypted number; and 

comparing said decrypted number with said random number stored within said portable 
computing system, (see column 2, lines 31 - 46 and 59 - 65; column 4, lines 34 - 42; Abstract; 
Figure 1) 

For claim 16, US '063 teaches: 
A system for providing controlled access to secure data, wherein said system comprises: 
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a portable computing system providing said controlled access to secure data 
during a specified time, wherein said portable computing system includes first 
processing means, first storage means, and a timer; 

a base computing system including second processing means and second 
storage means; 

a connection between said portable computing system and said base computing 
system for transmitting data between said portable computing system and said base computing 
system; and 

a first program, executing within said first processing means, causing, said 
portable computing system to perform a process including: 

determining if a public cryptographic key is stored in a first location within said first 
storage means; 

in response to determining that a public cryptographic key is not stored in said first 
location, transmitting a request code, receiving said public cryptographic key, and storing said 
public cryptographic key in said first location; 

transmitting a first code; 

receiving a response to said first code; 

determining from said response to said first code if a connection has been made 
to said base computing system; and 

setting said timer to run until said specified time has expired; 
a subroutine executing within said first processing means, causing said portable computing 
system to perform a process including: 

determining if said timer is running; and 

providing access to said secure data only when said timer is 
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running; and 

a second program, executing within said second processing 
means, causing said base computing system to perform a process including: 
receiving said request code; 

in response to receiving said request code, transmitting a public 
cryptographic key of said base computing system to said portable computing system; 
receiving said first code; and 

in response to receiving said first code, transmitting said response to 
said first code, (see column 2, lines 31 - 46 and 59 - 65; column 4, lines 1 - 52; Abstract; 
Figure 1) 

For claim 17, US '063 teaches: 
The system of claim 16, wherein said first storage means includes a timer register storing a 
number corresponding to a time remaining, 

said number corresponding to a time remaining is decremented in response to a 
series of timing pulses generated within said portable computing system, and 

setting said timer includes storing a number corresponding to said specified time in 
said timer register, (see column 2, lines 43 - 46; column 3, lines 7- 9) 

For claim 18, US '063 teaches: 
The system of claim 17, wherein 

said step of transmitting a first code includes generating a random number, 
storing said random number in a second location within said first storage, and transmitting said 
random number to said base computing system as said first code, 

said step of transmitting said response to said first code includes encrypting said 
random number with a private cryptographic key of said base computing system to form an 
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encrypted random number, and transmitting said encrypted random number as said response to 
said portable computing system as said response to said first code, and 

said step of determining from said response to said first code if a connection has 
been made to said base computing system includes decrypting said encrypted number to form a 
decrypted number and comparing said decrypted number with said random number stored in 
said second location within said first storage, (see column 4, lines 22 - 52; column 4, line 62 - 
column 5, lines 1-15) 

For claim 19, US '063 discloses: 
The system of claim 18, wherein said first processing means includes a first microprocessor and 
a first cryptographic processor, 

said encrypted number is decrypted in said first cryptographic processor, 

said first storage means includes first secure storage accessed only through 
said first cryptographic processor, and 

said first location and said timer register within said first storage means are within said 
secure storage, (see column 4, lines 22 - 42; column 3, lines 7-9) 

For claim 20, US '063 discloses: 
The system of claim 18, wherein 

said second processing means includes a second microprocessor and a 
second cryptographic processor, 

said random number is encrypted to form said encrypted number within said second 
cryptographic processor, 

said second storage means includes second secure storage accessed only through 
said second cryptographic processor and 
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said private cryptographic key of said base computing system is stored within said 
second secure storage, (see column 5, lines 1 - 15, 33 - 39 and 47 - 53) 

For claim 21 , US "063 discloses: 
The system of claim 16, wherein 

said portable computing system additionally includes a display, 
said first program additionally causes a successful completion message to be 
displayed on said display in response to a determination from said response to said first code 
that a connection has been made to said base computing system, 

and said first program additionally causes an error message to be displayed 
on said display in response to a determination from said response to said first code 
that a connection has not been made to said base computing system, (see column 4, line 63 - 
column 5, lines 1-15 and 55 - 59) 

For claim 22, US '063 discloses: 
The system of claim 16, wherein 

said portable computing system additionally includes a display and a 
keyboard, and 

said first program causes said portable computing to perform a process 
additionally including displaying a menu, receiving a user input from said keyboard as said 
menu is displayed, and determining said specified time from said user input, (see column 4, 
lines 43 - 52; column 5, lines 55 - 59) 

For claim 23, US '063 discloses: 
The system of claim 16, wherein 

said portable computing system additionally includes a display and a 

keyboard, 
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said first program causes said portable computing to perform a process 
additionally including displaying a menu and receiving a password from said 
keyboard as said menu is displayed, 

said step of transmitting a first code includes: 
generating a random number; 

storing said random number in a second location within said first 

storage; 

concatenating said random number with said password to form a 
concatenated number 

encrypting said concatenated number with a private cryptographic 
key of said portable computer system stored in a third location within said first storage 
means to form said first code; and 

transmitting said random number to said base computing system as 

said first code, 

said step of transmitting said response to said first code includes: 
decrypting said first code with a private cryptographic key of said 
base computing system stored in a fourth location within said second storage means; 
separating said password from said random number; 
determining whether said password separated from said random 
number matches a password stored; 

encrypting said random number with a private cryptographic key of 
said base computing system to form an encrypted random number, and 



Application/Control Number: 09/993, 1 35 Page 1 5 

Art Unit: 2132 

in response to determining that said password separated from said 
random number matches said password stored, transmitting said encrypted random number as 
said response to said portable computing system as said response to said first code, 
said second program causes said base computing system to perform a 
process additionally including: 

determining if a password is stored in a fifth location within said 
second storage means; 

in response to a determination that a password is not stored in said 
fifth location, storing said password separated from said random number in said fifth location; 

in response to a determination that a password is stored in said fifth 
location, comparing said password stored in said fifth location with said password separated 
from said random number; 

in response to determining that said password stored in said fifth location 
matches said password separated from said random number, 

encrypting said random number and to form a transmitting an approval code to said 
portable computing system as said response to said first code; and 

said step of determining from said response to said first code if a connection has 
been made to said base computing system includes determining that said approval code has 
been received, (see column 2, lines 31 - 46 and 59 - 65; column 4, lines 34 - 42 and line 55 - 
column 5, lines 1-15; Abstract; Figure 1) 

For claim 24, US '063 discloses: 
The system of claim 23, wherein 

said second program causes said base computing system to perform a 
process additionally including, in response to determining that said password stored in said fifth 
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location does not match said password separated from said random number, transmitting an 
error code to said portable computing system as said response to said first code 

said first program causes said portable computing to perform a process 
additionally including displaying a successful completion message on said display in response 
to receiving said approval code, and displaying an error message on said display in response to 
receiving said error code, (see column 4, lines 62 - column 5, lines 1-15) 

For claim 25 t US '063 discloses: 
The system of claim 23, wherein 

said first storage means includes a timer register storing a number corresponding to a 
time remaining, 

said number corresponding to a time remaining is decremented in response to a series 
of timing pulses generated within said portable computing system, and 

setting said timer includes storing a number corresponding to said specified time in said 
timer register, (see column 3, lines 7-9; column 4, lines 8-12) 

For claim 26, US '063 discloses: 
The system of claim 23, wherein said first processing means includes a first microprocessor 
and a first cryptographic processor, 

said concatenated number is encrypted in said first cryptographic processor, 

said first storage means includes first secure storage accessed only through said first 
cryptographic processor, and 

said secure storage includes said first location, said third location, and said timer 
register within said first storage means, (see column 2, lines 43 - 46; column 3, lines 7-9) 

For claim 27, US '063 discloses: 
The system of claim 23, wherein 
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said second processing means includes a second microprocessor and a second 
cryptographic processor, 

said random number is encrypted to form said encrypted number within said second 
cryptographic processor, 

said second storage means includes second secure storage accessed only through said 
second cryptographic processor, and 

said fourth and fifth locations within said second storage means are within 
said second secure storage, (see column 5, lines 1 - 15, 33 - 39 and 47 - 53) 

For claim 28, US '063 discloses: 
The system of claim 23, wherein 

said step of transmitting a request code includes transmitting a public 
cryptographic key of said portable computing system, and 

said step of receiving a request code includes storing said public 
cryptographic key of said portable computing system in a sixth location within 
said second storage means, (see column 5, lines 1 - 15, 33 - 39 and 47 - 53) 
As for claim 29, US '063 discloses: 
A computer readable medium within a portable computing system, 

wherein said computer readable medium has computer readable instructions for 
performing a method comprising: 

determining if a public cryptographic key is stored in a first location within said first 
storage means; 

in response to determining that a public cryptographic key is not stored in said first 
location, transmitting a request code, receiving said public cryptographic key, and storing said 
public cryptographic key in said first location; 
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made transmitting a first code; 
receiving a response to said first code; 

determining from said response to said first code if a connection has been to a base 
computing system; and 

setting a timer to run until a specified time has expired, (see column 4, lines 34 - 42; 
column 5, lines 15-30) 

For claim 30, US '063 discloses: 
The computer readable medium of claim 29, wherein said step of setting aid timer includes 
storing a number corresponding to said specified time in a timer register, (see column 2, lines 
43 - 46) 

For claim 31 , US '063 discloses: 
The computer readable medium of claim 29, wherein 

said step of transmitting a first code includes generating and storing a 
random number, and transmitting said random number to said base computing 
system as said first code, and 

said step of determining from said response to said first code if a 
connection has been made to a base computing system includes decrypting an 
encrypted number to form a decrypted number and comparing said decrypted 
number with said random number, (see column 4, lines 22 - 52) 
For claim 32, US '063 discloses: 
The computer readable medium of claim 29, wherein said method additionally 
comprises: 

displaying a successful completion message in response to receiving an 
approval code; and 
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displaying an error message in response to receiving an error code, (see column 4, line 
63 - column 5, lines 1-15) 

For claim 33, US '063 discloses: 
The computer readable medium of claim 29, wherein said method additionally 
comprises: 

displaying a menu; 

receiving an input from a keyboard as said menu is displayed; and 
determining said specified time from said input, (see Figure 1) 
For claim 34, US '063 discloses: 
The computer readable medium of claim 29, wherein 

said method additionally includes displaying a menu and receiving a password from a 
keyboard as said menu is displayed, 

said step of transmitting a first code includes: 
generating a random number; 

storing said random number in a second location within said first storage; 
concatenating said random number with said password to form a 
concatenated number, 

encrypting said concatenated number with a private cryptographic 
key of said portable computer system stored in a third location within said first storage 
means to form said first code; and 

transmitting said random number to said base computing system as 
said first code, (see column 4, lines 34 - 42) 
As for claim 35, US '063 discloses: 
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In a portable computing system having a user interface including a display and a keyboard, a 
method for limiting access to secure data to a 

specified time, wherein said method comprises: 

displaying a screen location for entering a number; 

accepting an input from said keyboard; 

displaying said input from said keyboard in said screen location; 

calculating a number determining said specified time as a function of said 
input from said keyboard; 

generating a random number; 

transmitting said random number to a base computing system; 
receiving an encrypted number from said base computing system, 
decrypting said encrypted number with a public cryptographic key stored within said 
portable computing system to form a decrypted number; 

determining if said random number matches said decrypted number; and 

in response to determining that said random number matches said decrypted 
number, setting a timer within said portable computing system to run for said specified time, 
wherein said access to secure data is provided only when said time is running, (see column 4, 
lines 22 -52; Figure 1) 

For claim 36, US '063 discloses: 
The method of claim 35, additionally comprising: 

displaying a successful completion message in response to determining 
that said random number matches said decrypted number; and 
displaying an error message in response to determining that said random 
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number does not match said decrypted number, (see column 4, line 63 - column 5, 
lines 1 - 5) 

As for claim 37, US '063 discloses: 
In a portable computing system having a user interface including a display and a keyboard, a 
method for limiting access to secure data to a specified time, wherein said method comprises: 

displaying a first screen location for entering a password and a second screen 
location for entering a number; 

accepting a first input from said keyboard; 

generating a password from said first input; 

accepting a second input from said keyboard; 

displaying said input from said keyboard in said second screen location; 
calculating a number determining said specified time as a function of said 
second input from said keyboard; 

generating a random number; 

encrypting said password with a public cryptographic key stored in said 

portable computing system; 

transmitting said random number to a base computing system; 

receiving an encrypted number from said base computing system, 

decrypting said encrypted number with said public cryptographic key stored within 

said portable computing system to form a decrypted number; 

determining if said random number matches said decrypted number; and 
in response to determining that said random number matches said decrypted 

number, setting a timer within said portable computing system to run for said specified time, 
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wherein said access to secure data is provided only when said timer is running, (see column 4, 
line 1 2 - column 5, lines 1-15) 

For claim 38, US '063 discloses: 
The method of claim 35, additionally comprising: 

displaying a successful completion message in response to determining that said 
random number matches said decrypted number; and 

displaying an error message in response to determining that said random 
number does not match said decrypted number and in response to receiving an 
error code from said base system, (see column 5, lines 1-5) 

For claims 39 - 43 US '063 discloses wherein said access to secure data is provided to 
said secure data with said portable computing system being connected to transmit and receive 
data from said base computing system on a periodic basis, (see column 4, lines 26 - 32) 

For claim 44, US '063 discloses: 
A portable computer including data storage storing secure data; 

communication means for connection to a base computer for data exchange; 
and processor means executing a security timer program including: 

establishing a connection between said portable computing system and a base 
computing system to provide for transfer of data between said portable computing system and 
said base computing system; 

verifying identity of said base computing system within said portable computing 

system; 

resetting a timer within said portable computing system to run for a specified time; 

and 
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providing access to said secure data only when said timer is running, (see Figure 1 , 
items 10 and 12; column 2, lines 31 - 46 and 59 - 65; Abstract) 

For claim 45, US '063 discloses: 
The portable computer of claim 1, wherein said step or verifying identity of said base computing 
system comprises: 

receiving and storing a public cryptographic key from said base computing system 
during an initialization process, 

following said initialization process, generating a random number within said portable 
computing system; 

transmitting said random number to said base computing system; 

receiving a number transmitted from said base computing system; 

decrypting said number transmitted from said base computing system to form a 
decrypted number; and 

determining that said decrypted number matches said random number, (see column 
4, lines 13-21) 

For claim 46, US '063 discloses: 
The portable computer of claim 44, additionally comprising a keyboard for data entry, wherein 
said method additionally comprises a step of verifying whether a password is entered correctly 
through said keyboard, (see column 4, lines 43 - 52; column 5, lines 55 - 59) 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. Maritzen et al in US Patent PGPub No. 2002/0073042 discloses a method and 
apparatus for secure wireless interoperability and communication between access devices. 
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7. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Laurel Lashley whose telephone number is 571-272-0693. The examiner 
can normally be reached on Monday - Thursday, alt Fridays btw 7:30 am & 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, Jr. can be reached on 571-272-3799. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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